Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: o4tA5jJOBpw88vVDi70Co57uzSjEc6c+K3w6bu8b3OU=
Subject key identifier: 7C:79:E2:0A:2C:4A:56:9B:DE:70:32:D9:50:F1:5B:2D:C4:A1:01:4E
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0198A0BB3E85D87AD247C68D149C10D55B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 00:01:22 +0000
Manifest this update: Wed 13 Aug 2025 00:01:22 +0000
Manifest next update: Thu 14 Aug 2025 00:01:22 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: 2NkZKVYQE++0NzT/RS+RRqlf5qwimnbtcIlRiAJN23w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:3e:85:d8:7a:d2:47:c6:8d:14:9c:10:d5:5b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Aug 13 00:01:22 2025 GMT
Not After : Aug 14 00:01:22 2025 GMT
Subject: CN=7c79e20a2c4a569bde7032d950f15b2dc4a1014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:b9:7f:fc:df:31:a5:6b:8d:6f:0d:37:7f:
c5:3d:dd:27:ec:4f:e0:66:a4:de:b7:be:dd:e6:60:
30:10:ca:47:77:89:89:c6:66:9f:dd:d8:89:cd:47:
0c:94:2e:2d:6e:60:1b:93:2c:20:0d:99:86:c3:37:
ed:55:6b:c8:e8:18:5c:55:61:fa:e5:e6:ce:f7:00:
2a:70:03:9a:26:9c:aa:3c:b9:a0:a6:9c:fd:c4:5f:
c7:e3:a7:19:4b:ff:81:9a:b4:50:bd:24:15:b7:13:
d6:c1:f1:45:fe:07:2c:e1:4e:6f:24:38:df:ff:d0:
51:04:c2:a9:b4:fb:c9:92:b7:9d:43:a5:32:96:1a:
5a:0f:e8:bb:09:92:f7:b9:2c:15:bb:0a:a9:6e:df:
6b:54:4d:84:86:13:52:1e:75:2b:99:6e:2f:47:15:
19:fa:21:b8:e5:7d:c8:f3:ae:97:b4:bf:0f:ca:e8:
29:ea:77:e5:07:d4:c9:5c:25:2e:df:9d:7d:70:ae:
d5:f2:93:f6:fb:79:08:a9:76:38:0f:e6:17:6c:7e:
9d:45:61:dd:e1:3a:3c:8b:a9:08:6b:a2:cd:c0:fc:
fd:d4:53:8b:7f:47:ba:c1:06:03:82:b6:01:5b:de:
39:6a:ab:ae:07:da:55:b3:76:3f:2b:c4:f0:54:b8:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:E2:0A:2C:4A:56:9B:DE:70:32:D9:50:F1:5B:2D:C4:A1:01:4E
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:95:75:2d:d4:b2:e0:2a:42:2b:78:79:38:5d:d7:49:a8:06:
29:25:1e:33:04:06:07:c6:bf:ff:99:a6:0f:bb:75:3a:32:3e:
2d:d9:3b:ab:8b:b8:3d:c8:67:10:21:10:7e:19:3a:30:a1:bd:
35:44:4f:e3:bd:f2:c9:29:bd:a6:f7:20:54:0f:d4:1f:8f:42:
db:b2:73:85:85:89:39:0e:4c:ea:fe:8e:36:d6:aa:5a:6f:1f:
84:91:06:12:bb:b9:89:11:a7:e9:7b:ac:fd:c6:16:34:92:f3:
21:cc:ca:21:95:de:b2:b9:6a:38:f2:ce:54:b8:e7:85:e7:10:
3a:63:73:db:cd:b1:d8:1b:e3:a2:b9:60:8d:41:3c:a5:5e:09:
b9:cf:47:4a:cc:84:9a:31:e8:c6:cc:4c:41:9b:fc:3f:48:5c:
d9:a2:60:fe:db:e9:00:cb:65:a4:a1:42:c5:61:35:8d:30:f2:
6d:b4:3b:e1:88:3d:f1:57:23:79:9a:93:e8:04:64:da:81:15:
61:dd:00:0a:08:12:92:af:b2:6c:9e:07:9d:4d:c6:59:79:39:
0b:6f:5d:5b:c5:fd:12:a1:4b:6b:f0:54:ea:67:c0:5f:1d:3c:
8c:5c:fc:b9:4a:c3:6e:3b:ff:f8:cd:dc:d3:6a:55:44:ad:5e:
5b:a4:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:40 2025 by rpki-client